9848 matches found
CVE-2017-10270
Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...
CVE-2017-10391
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10400
CVE-2017-10400 affects Oracle GlassFish Server within Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). Affected version is 3.1.2. The vulnerability reportedly allows an unauthenticated, network-accessible attacker over HTTP to compromise GlassFish Server, with the...
CVE-2017-10393
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10060
This CVE (CVE-2017-10060) affects Oracle Business Intelligence Enterprise Edition (OBIEE) within Oracle Fusion Middleware, specifically the Analytics Web General subcomponent. Affected versions are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability can be exploited by an unauth...
CVE-2017-10400
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration Graphical User Interface. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2017-10033
CVE-2017-10033 affects Oracle WebCenter Sites (Support Tools subcomponent) in Oracle Fusion Middleware. Vulnerable versions are 11.1.1.8.0 and 12.2.1.2.0. The issue enables an unauthenticated attacker with access to the hosting infrastructure to perform unauthorized read, update, insert, or delet...
CVE-2017-10385
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10385
CVE-2017-10385 affects Oracle GlassFish Server’s Web Container in Oracle Fusion Middleware 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, with successful attacks requiring user interaction. This can lead to unauthorized...
CVE-2017-10271
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...
CVE-2017-10385
Removed by vendor...
CVE-2017-10352
CVE-2017-10352 affects Oracle WebLogic Server (Oracle Fusion Middleware) in multiple supported versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0, 12.2.1.3.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker targeting the WebLogic Web Services/WLS component...
CVE-2017-10055
Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware subcomponent: Admin Graphical User Interface. The supported version that is affected is 7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10051
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached t...
CVE-2017-10336
CVE-2017-10336 affects Oracle WebLogic Server (Web Container) in Oracle Fusion Middleware. Affected versions are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially enabling unau...
CVE-2017-10166
Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware subcomponent: C Oracle SSL API. Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromis...
CVE-2017-10152
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2017-10051
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached t...
CVE-2017-10391
CVE-2017-10391 affects the Oracle GlassFish Server Administration subcomponent. Affects Oracle Fusion Middleware GlassFish Server versions 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read, update, insert, or delete data and may enable pa...
CVE-2017-10152
CVE-2017-10152 affects Oracle WebLogic Server (Web Container) with vulnerable versions 10.3.6.0.0 and 12.1.3.0.0. The issue allows a low-privileged attacker who can reach the server over HTTP to compromise the WebLogic Server and potentially access all data exposed by it. The CVSSv3 base score is...